Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Problems Connecting to Apple OpenDirectory
  •  
-nob-

Messages: 25
Karma: 0
Send a private message to this user
sorry, i can?t find any help in the Forum or in the FAQ.

I run a new trial Version to decide to wich Intranet-Mailserver to switch, nearly all is clear, but one Problem and one Feature i can?t find (second Post).

I have one OD Master on OSX Server 10.4x, running Kerberos
I have one OD Master on OSX Server 10.4x, without Kerberos, some Replikas behind
Installed OD-Extension to both Servers, make a reboot.

If i try to map Users from one of my Directory Servers i get a error Message "cannot bind to LDAP Server (invalid credentials). Check the username and password. User and Pass must be right, so i can login with the Apple Server-Konfig, can get a replika with these Settings.

At the lan i used a own DNS for the lokal zone: cdx.lan, OD server is cdx-server.cdx.lan.

Any Idea, any help?

thx

nob
  •  
premedia

Messages: 9
Karma: 0
Send a private message to this user
i have exactly the same problem. don?t know why. the user is right.
but still get invalid credentials
  •  
-nob-

Messages: 25
Karma: 0
Send a private message to this user
I mailed kerio support, but didn?t get any help.

On the end of this week i will have a phone-meeting to a Apple OpenDirectory Specialist. It seems that we have to make some Settings in OD first.

.. this forum sucks :(
  •  
premedia

Messages: 9
Karma: 0
Send a private message to this user
hi

i found the problem.
in the directory service tab you have to enter the hostname, username and password.

so i typed in the following settings:

host: host.domane.at
user: root -> kerio changed it to this settings: uid=root,cn=users,dc=domane,dc=at
and password

ok i now changed the entry which kerio created in user to:
uid=root,cn=users,dc=host,dc=domane,dc=at

then the login works but you will get another problem when switching to users or groups, kerio is then telling you that you have incorrect installed your kerio open directory extension.

so i switched back to the default domain directory service and changed the following setting:
ldap search suffix:
search suffix: dc=domane,dc=at -> dc=host,dc=domane,dc=at

so now the connection to my openldap master works correct.

greets
  •  
-nob-

Messages: 25
Karma: 0
Send a private message to this user
This didnt work for me. Invalid DN Syntax.
  •  
premedia

Messages: 9
Karma: 0
Send a private message to this user
please post exactly what you entered in the directory service tab
  •  
-nob-

Messages: 25
Karma: 0
Send a private message to this user
OD Master with Kerberos is
cdx-server.cdx.lan / 192.168.1.200
cdx-mailserver.cdx.lan / 192.168.1.200

kerio OD extension is installed
open directory = ldap settings on mailserver succeed

kerberos OD is dc=cdx-server,dc=cdx,dc=lan
directory admin is: diradmin

kerio settings:

OD with kerberos
host: cdx-server.cdx.lan
username: uid=diradmin,cn=users,dc=cdx,dc=lan
pass: *****
search suffix: dc=cdx,dc=lan

with your parameters:

username: uid=diradmin,cn=users,cd=host,dc=cdx,dc=lan
pass: *****
search suffix: dc=host,dc=cdx,dc=lan

Are you shure that there are no settings on the OD Master to do first? Any Suggestion for a tool or a howto, to test the damned Apple OD Server?

thx
  •  
premedia

Messages: 9
Karma: 0
Send a private message to this user
ok do not enter "host"!!!
enter cdx-server instead of host

with host i mean your server

host.domane.at in you case means
dx-server.cdx.lan

kerio settings should look like this:
host: cdx-server.cdx.lan
username: uid=diradmin,cn=users,dc=cdx-server,dc=cdx,dc=lan
pass: *****
search suffix: dc=cdx-server,dc=cdx,dc=lan[/COLOR]

and i use root instead of diradmin but diradmin also should work
  •  
Kerio_jthomas

Messages: 511
Karma: 1
Send a private message to this user
> I mailed kerio support, but didn?t get any help.

That should never happen. What was your ticket number?

Joshua Thomas
Technical Support Manager
2350 Mission College Blvd, Suite 400
Santa Clara, CA 95054
Phone: (408) 496-4500
Fax: (408) 496-6902
http://www.kerio.com/support.html

  •  
-nob-

Messages: 25
Karma: 0
Send a private message to this user
Oh great! the test works!

many thanks, premedia. :)

--

next error:

LDAP Operation failed, check that you have installed OD Extension properly. Wich mistake can i do with a package installer w/o config-settings?

--

Ticket ID: INK-669474
  •  
Kerio_ktrumbull

Messages: 597
Karma: 2
Send a private message to this user
I found ticket INK-669474. It was replied to about 2 hours after it was submitted, but we have not heard anything back from you since we replied. If you require technical support from us, please reply to your ticket and we would be happy to assist you.

Kevin Trumbull
Kerio Technical Support Team Leader
http://support.kerio.com
  •  
-nob-

Messages: 25
Karma: 0
Send a private message to this user
Is my spamfilter to hard? Maybe. ;)
Sorry. I put your Domain in my whitelist, so this should be happend no more...

Checked the Server via Terminal, Extension runs.
Kerberos Realm in Advanced Setting is right.

this is all the log says:

[27/Jun/2006 17:50:44][34216448] {ldapdb} Sending "(&(objectclass=apple-user)(kerio-Mail-Active=*))" search request with "(null)" scope to "cdx-server.cdx.lan" LDAP server, base DN = "cn=users,dc=server,dc=cdx,dc=lan"
[27/Jun/2006 17:50:44][34216448] {ldapdb} Acquired connection to the Active Directory LDAP server "cdx-server.cdx.lan" from the pool slot 0
[27/Jun/2006 17:50:44][34216448] {ldapdb} Search request "(&(objectclass=apple-user)(kerio-Mail-Active=*))" with scope "(null)" to LDAP server "cdx-server.cdx.lan" result in "No such object" message
[27/Jun/2006 17:50:44][34216448] {ldapdb} Releasing LDAP connection in pool slot 0

  •  
premedia

Messages: 9
Karma: 0
Send a private message to this user
the following problem occours when the ldap search base is incorrect.

next error:

LDAP Operation failed, check that you have installed OD Extension properly. Wich mistake can i do with a package installer w/o config-settings?

in my case i played with the entry in tehe search base:

it was: dc=premedia,dc=at
i changed it to dc=master,dc=premedia,dc=at

maybe this help you.
greets
  •  
-nob-

Messages: 25
Karma: 0
Send a private message to this user
I can?t login via Admin-Account, Webmail sucks also. Maybe the Test-Time was running out?

Made a new install and easy setup.

OD Settings as testet, OD Search Path: dc=cdx-server,dc=cdx,dc=lan

AND IT WORKS.!

Don?t know why it needs a second try, but thank you very much! :)
Previous Topic: Build Number
Next Topic: LDAP questions...
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Fri Nov 24 12:13:44 CET 2017

Total time taken to generate the page: 0.00536 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.